b241e318b5c876c0aa618268bb14b014_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b241e318b5c876c0aa618268bb14b014_JaffaCakes118
Size

2.9MB
MD5

b241e318b5c876c0aa618268bb14b014
SHA1

c07f175b9f4b33ea52f09f2bbf7a315a947b84ab
SHA256

c0f80cce9c7f7fe09ab65b5709b3dd2fcafd049d0104fc737e17468480ebe002
SHA512

0e3a187fa2fb1c4d07981455720ff2ea848d807d889e25bec354b11c07972864eae00e6dbfa695340b6d994db04d63af54c58f2c503e0be21812c5b59cb9a95a
SSDEEP

49152:ecGWRql3P5V55cpF8J2IJTVX9wEnNG9LtT4Buje8mHfSAh9K76WgjcbQfrg8lwSt:6lYVCKK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b241e318b5c876c0aa618268bb14b014_JaffaCakes118

Files

b241e318b5c876c0aa618268bb14b014_JaffaCakes118
.exe windows:4 windows x86 arch:x86

824e016184dda86c5cc3bb5bf58767d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
SystemTimeToFileTime
HeapFree
CreateMutexW
GetEnvironmentStringsW
lstrlenA
OpenMutexA
TlsGetValue
GetStdHandle
GetOEMCP
GetTickCount
DeleteFileW
RemoveDirectoryW
CreateFileMappingA
FormatMessageW
EnterCriticalSection
LeaveCriticalSection
GlobalFree
FindNextFileW
FindNextFileA
GetFileType
GetProcessHeap
lstrcmpiA
FileTimeToSystemTime
HeapCreate
InterlockedCompareExchange
GetLocalTime
UnhandledExceptionFilter
WriteFile
ReadFile
GetACP
FoldStringW
LoadResource
GetModuleHandleA
GetUserDefaultUILanguage
GetCommandLineW
HeapReAlloc
SetFilePointer
TerminateProcess
RaiseException
CompareStringW
UnmapViewOfFile
LocalUnlock
DisableThreadLibraryCalls
GlobalUnlock
GetLastError
GetCommandLineA
FindClose
MultiByteToWideChar
GetLocaleInfoA
SetEndOfFile
GetLocaleInfoW
SizeofResource
LocalAlloc
CreateFileA
QueryPerformanceCounter
CreateEventW
GetUserDefaultLCID
DeleteCriticalSection
ReleaseMutex
HeapSize
lstrcmpiW
SetErrorMode
GetCurrentProcess
FindFirstFileW
LocalReAlloc
GlobalHandle
GetPrivateProfileStringA
SetLastError
LocalLock
GetVersion
VirtualProtect
ReleaseSemaphore
GetCurrentThread
GetCPInfo
SetFileAttributesA
lstrcpynA
SetEvent
ExpandEnvironmentStringsW
GetTimeFormatW
LocalFree
InterlockedIncrement
GetFileInformationByHandle
WaitForMultipleObjects
FindResourceW
IsDebuggerPresent
GetCurrentThreadId
GetVersionExW
CompareStringA
lstrcmpW
CreateFileMappingW
CloseHandle
GetFileSize
WideCharToMultiByte
VirtualFree
GetEnvironmentStrings
SetThreadLocale
MapViewOfFile
FindResourceA
TlsSetValue
VirtualAlloc
InitializeCriticalSection
GlobalLock
GetFileAttributesW
VirtualQuery
CreateFileW
GetSystemTimeAsFileTime
LoadLibraryExW
lstrcpynW
LocalSize
FlushFileBuffers
GetDateFormatW
lstrcatW
MulDiv
OutputDebugStringA
ResetEvent
ExitProcess
SetHandleCount
lstrlenW
InterlockedExchange
LCMapStringW
SetUnhandledExceptionFilter
GetCurrentProcessId
GetTempPathW
GetProcAddress
GetStartupInfoA
GlobalAlloc
lstrcpyW

msvcrt

__set_app_type
_controlfp
_snwprintf
_onexit
__getmainargs
_callnewh
_XcptFilter
isdigit
??0exception@@QAE@ABV0@@Z
_amsg_exit
_adjust_fdiv
__p__commode
_wtol
iswctype
localtime
__p__fmode
_acmdln
_initterm
_cexit
__setusermatherr
iswspace
time
wcsncpy
_c_exit
?terminate@@YAXXZ
exit
wcsncmp
_exit

user32

GetKeyboardLayout
GetWindowLongA
WinHelpW
SetWinEventHook
RegisterClassExW
ScreenToClient
CreateDialogParamW
IsClipboardFormatAvailable
MessageBoxA
OffsetRect
GetParent
wsprintfA
CreateWindowExW
TranslateAcceleratorW
SetWindowLongA
GetDlgItemTextW
SendDlgItemMessageW
SetWindowTextW
PostQuitMessage
SetActiveWindow
GetDC
SetClipboardData
LoadImageW
GetDesktopWindow
ShowWindow
GetForegroundWindow
SetDlgItemTextW
PeekMessageW
GetDlgItem
GetClassInfoExW
EnumWindows
EnableMenuItem
CallWindowProcA
GetWindowTextW
InvalidateRect
SetFocus
LoadAcceleratorsW
GetMenuState
CloseClipboard
SetDlgItemTextA
SendMessageW
MessageBoxW
ClientToScreen
DefWindowProcW
IsWindow
IsIconic
GetSubMenu
EnableWindow
ReleaseDC
EndDialog
PostMessageW
GetScrollPos
DialogBoxParamW
UpdateWindow
GetFocus
SetForegroundWindow
MoveWindow
MessageBeep
DestroyWindow
CheckMenuItem
OpenClipboard
CharNextA
GetDlgCtrlID
RegisterWindowMessageW
DrawTextExW
GetMessageW
GetSystemMetrics
GetMenu
LoadStringA
GetWindowPlacement
IsDialogMessageW
GetWindowTextLengthW
CharLowerW
RegisterWindowMessageA
IsWindowVisible
CharUpperW
SetCursor
SetWindowPlacement
TranslateMessage
GetCursorPos
GetWindowLongW
wsprintfW
DispatchMessageW
ChildWindowFromPoint
ReleaseCapture
EnumChildWindows
LoadIconW
GetSystemMenu
DialogBoxParamA
SystemParametersInfoA
LoadStringW
UnhookWinEvent
CharNextW
SetWindowLongW
LoadCursorW
SetScrollPos
GetClientRect

comdlg32

CommDlgExtendedError
PrintDlgExW
PageSetupDlgW
ChooseFontW
GetFileTitleW
FindTextW
GetSaveFileNameW
GetOpenFileNameW
ReplaceTextW

gdi32

GetTextFaceW
AbortDoc
CreateFontIndirectW
EnumFontsW
GetTextExtentPoint32W
GetObjectW
StartPage
TextOutW
GetStockObject
StartDocW
EndPage
GetDeviceCaps
SetViewportExtEx
SetWindowExtEx
DeleteObject
DeleteDC
EndDoc
SetMapMode
GetTextMetricsW
SelectObject
SetAbortProc
CreateDCW
LPtoDP
SetBkMode

advapi32

RegCloseKey
IsTextUnicode
RegSetValueExW
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyW
RegQueryValueExW

shell32

DragFinish
DragQueryFileW
DragAcceptFiles
ShellAboutW

winspool.drv

ClosePrinter
OpenPrinterW
GetPrinterDriverW

comctl32

CreateStatusWindowW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 508KB - Virtual size: 509KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

824e016184dda86c5cc3bb5bf58767d8

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

comdlg32

gdi32

advapi32

shell32

winspool.drv

comctl32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 2.3MB - Virtual size: 2.3MB

.data Size: 508KB - Virtual size: 509KB

.reloc Size: 512B - Virtual size: 384B

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 2.3MB - Virtual size: 2.3MB

.data
Size: 508KB - Virtual size: 509KB

.reloc
Size: 512B - Virtual size: 384B

.rsrc
Size: 2KB - Virtual size: 2KB